CVE-2017-5931

HIGH

QEMU < 2.8.1.1 - Integer Overflow in virtio-crypto Request Handling

Title source: llm
STIX 2.1

Description

Integer overflow in hw/virtio/virtio-crypto.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (QEMU process crash) or possibly execute arbitrary code on the host via a crafted virtio-crypto request, which triggers a heap-based buffer overflow.

References (6)

Core 6
Core References
Patch, Vendor Advisory mailing-list x_refsource_mlist
https://lists.nongnu.org/archive/html/qemu-devel/2017-01/msg01368.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/96141
Third Party Advisory vendor-advisory x_refsource_gentoo
https://security.gentoo.org/glsa/201702-28
Mailing List, Patch, Third Party Advisory mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2017/02/08/2
Issue Tracking, Patch, Third Party Advisory x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=1420092

Scores

CVSS v3 8.8
EPSS 0.0022
EPSS Percentile 44.6%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Details

CWE
CWE-190
Status published
Products (1)
qemu/qemu < 2.8.1.1
Published Mar 27, 2017
Tracked Since Feb 18, 2026